01
Define the operating scope
Include industrial applications, production security zones, engineering workstations, approved partner or remote access in a representative operating scope.
Manufacturing
Connected factory segmentation · Briefing
Define the operating requirements for connected factory segmentation.
Apply least-privilege policy across industrial automation and control system security zones and conduits.
Primary capability
Zero Trust
Operational outcome
Define the operating constraint, systems, and decision.
Limit lateral movement while preserving required production and support workflows.
02
Trace the protected path
validated identity and machine state → fabric admission → approved service policy → enforcement across a workload or zone conduit
03
Review the decision
Determine whether each approved role and workload receives only the service access permitted through the defined zone conduits.
Outcome readiness
Define the systems and constraints for connected factory segmentation.
Give network, security, and operational teams one service path to review and one decision to make.
Include industrial applications in the selected scope.
Include production security zones in the selected scope.
Include engineering workstations in the selected scope.
Include approved partner or remote access in the selected scope.
Include identity services in the selected scope.
Include Endlets in the selected scope.
Inputs
industrial applications, production security zones, engineering workstations, approved partner or remote access, identity services, Endlets
Path
validated identity and machine state → fabric admission → approved service policy → enforcement across a workload or zone conduit
Evidence
identity evidence, policy decisions, allowed and denied flows, service reachability, session state, and revocation
Quick answers
Connected factory segmentation FAQs
Which systems are in scope for connected factory segmentation?+
industrial applications, production security zones, engineering workstations, approved partner or remote access, identity services, Endlets
What operational outcome should the team review?+
Limit lateral movement while preserving required production and support workflows.
What decision should the briefing support?+
Determine whether each approved role and workload receives only the service access permitted through the defined zone conduits.
Continue the evaluation path
See the architecture behind connected factory segmentation.
Determine whether each approved role and workload receives only the service access permitted through the defined zone conduits.
Continue to Architecture
